$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa File: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (raw, json) Hash identifier: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8= Subject key identifier: F6:20:1A:C3:A8:3D:54:33:06:54:A6:7D:98:DF:18:B9:C8:19:55:24 Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 3CFD430E4BE6BF980B29E5C74FE96BB4B4966D8C Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa Signing time: Wed 11 Jun 2025 17:00:00 +0000 ROA not before: Wed 11 Jun 2025 16:55:00 +0000 ROA not after: Wed 10 Jun 2026 17:00:00 +0000 asID: 59288 IP address blocks: 27.0.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fd:43:0e:4b:e6:bf:98:0b:29:e5:c7:4f:e9:6b:b4:b4:96:6d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Jun 11 16:55:00 2025 GMT Not After : Jun 10 17:00:00 2026 GMT Subject: CN=F6201AC3A83D54330654A67D98DF18B9C8195524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:c7:ea:7f:4a:15:9a:ff:81:3e:4c:0a:a2: 9e:7e:03:6d:af:a5:98:9d:40:fb:45:93:94:16:07: 26:a2:7e:4a:22:67:2c:16:7e:ca:3f:30:af:00:53: 05:1e:86:6b:a1:56:5c:c5:a3:34:5c:12:e8:42:37: 46:5a:05:8f:e6:d0:44:f1:4d:13:75:1b:10:2d:72: 75:cb:38:14:f4:c9:a6:c4:d2:86:18:58:96:28:43: bb:d6:49:93:3a:9c:c0:79:35:fc:0c:67:2c:9a:cd: 15:be:49:11:d3:b7:5f:5e:c0:28:d0:2c:f6:b1:08: cb:f5:e2:60:7e:91:dc:df:28:8d:f7:d0:5b:d1:1d: f3:fc:1a:b2:33:95:e1:9e:ab:ca:c8:8a:fc:36:aa: db:3e:b8:cc:67:2a:de:d3:35:06:a8:27:90:bf:13: 15:72:8c:78:ec:41:66:6e:41:e8:4d:38:ed:95:31: 43:c0:73:72:e4:a7:f1:b3:45:e4:b6:f6:68:e0:7c: 4a:c2:a7:20:10:7d:66:9d:eb:26:bd:ff:34:96:b0: ee:46:dc:a4:e3:07:14:ef:8a:5f:46:ee:e9:99:4f: e1:c3:56:13:3c:25:d4:86:e2:3e:7d:34:fa:67:08: d1:c2:2d:f8:41:1a:60:0b:94:4f:a8:d1:9e:35:10: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:20:1A:C3:A8:3D:54:33:06:54:A6:7D:98:DF:18:B9:C8:19:55:24 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.196.0/22 Signature Algorithm: sha256WithRSAEncryption b6:af:d1:da:30:bb:14:39:82:da:89:e8:5c:36:99:1a:71:f7: 91:8b:14:d3:dd:31:24:22:90:4d:4a:c2:4f:08:47:b7:ae:3b: 6b:5b:de:2d:bc:d8:d1:d5:8e:16:a8:4e:52:81:bb:2e:5d:08: 58:23:95:7f:2c:a5:43:2e:78:c8:60:83:96:fc:44:57:8b:f9: 35:d1:63:94:c0:dc:91:be:4c:29:58:c8:1f:ee:33:de:89:ae: 68:f5:48:10:28:2c:e1:66:36:cf:d4:48:ec:6f:2f:1d:2c:6f: 45:65:22:d2:8a:a9:7b:7c:c5:91:c4:93:c7:37:33:a1:b9:24: 24:17:0f:d0:11:a3:04:03:05:9c:97:82:d4:3a:fe:1d:1e:87: dd:6f:74:63:28:7c:0b:5d:28:95:25:cb:12:12:95:54:cf:13: 93:e8:2a:fc:55:4a:f2:55:ff:9b:d2:7a:8f:e5:91:33:8c:b6: 4c:bb:83:43:c7:54:13:a0:07:72:8e:9f:11:ed:68:c7:d3:3a: a3:af:e8:d4:04:e5:80:a9:68:89:67:c8:5c:7d:9f:3b:ea:50: 50:49:2e:6c:80:09:a1:d4:e3:c0:08:59:1d:c7:34:bc:5c:9a: 73:d5:76:29:9d:82:fa:36:96:32:23:64:3e:02:1b:fe:8e:e6: 75:7a:7e:6d -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUPP1DDkvmv5gLKeXHT+lrtLSWbYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTA2MTExNjU1MDBaFw0yNjA2MTAxNzAwMDBaMDMxMTAvBgNV BAMTKEY2MjAxQUMzQTgzRDU0MzMwNjU0QTY3RDk4REYxOEI5QzgxOTU1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTC8fqf0oVmv+BPkwKop5+A22v pZidQPtFk5QWByaifkoiZywWfso/MK8AUwUehmuhVlzFozRcEuhCN0ZaBY/m0ETx TRN1GxAtcnXLOBT0yabE0oYYWJYoQ7vWSZM6nMB5NfwMZyyazRW+SRHTt19ewCjQ LPaxCMv14mB+kdzfKI330FvRHfP8GrIzleGeq8rIivw2qts+uMxnKt7TNQaoJ5C/ ExVyjHjsQWZuQehNOO2VMUPAc3Lkp/GzReS29mjgfErCpyAQfWad6ya9/zSWsO5G 3KTjBxTvil9G7umZT+HDVhM8JdSG4j59NPpnCNHCLfhBGmALlE+o0Z41ELzZAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU9iAaw6g9VDMGVKZ9mN8YucgZVSQwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvMzIzNzJlMzAyZTMxMzkzNjJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDM1MzkzMjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIbAMQwDQYJKoZIhvcNAQEL BQADggEBALav0dowuxQ5gtqJ6Fw2mRpx95GLFNPdMSQikE1Kwk8IR7euO2tb3i28 2NHVjhaoTlKBuy5dCFgjlX8spUMueMhgg5b8RFeL+TXRY5TA3JG+TClYyB/uM96J rmj1SBAoLOFmNs/USOxvLx0sb0VlItKKqXt8xZHEk8c3M6G5JCQXD9ARowQDBZyX gtQ6/h0eh91vdGMofAtdKJUlyxISlVTPE5PoKvxVSvJV/5vSeo/lkTOMtky7g0PH VBOgB3KOnxHtaMfTOqOv6NQE5YCpaIlnyFx9nzvqUFBJLmyACaHU48AIWR3HNLxc mnPVdimdgvo2ljIjZD4CG/6O5nV6fm0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:54:58 2025 by rpki-client